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(54) Method and apparatus for data traffic policing 



(57) The invention concerns a data traffic policer 
(POL) included in a telecommunication network to po- 
lice data traffic. The data traffic includes data packets 
that are part of a lower order data flow that is on its turn 
part of a higher order data flow. Each data packet is as- 
sociated to a bwer order identifier (LOi) that identifies 
the lower order data flow and to a higher order identifier 
that (HOI) identifies the higher order data flow. The po- 
licer (POL) includes first determining means (DET1) 
coupled to an input of the policer (POL) to determine, 
upon reception of a data packet, its lower order identifier 
(LOI). A first control means (CTRL1 ) coupled to the first 
determining means (DET1 ) checks a conformance of 
the data packet according to predefined lower order 



conformance rules (LOC(LOI)) associated to its lower 
order identifier (LOI) and provides thereby a lower order 
conformance result (LOCR) that is bwer order conform- 
ing or lower order non -conforming. Furthermore the po- 
licer (POL) includes second determining means (DET2) 
coupled to the input to determine the higher order iden- 
tifier (HOI) that is associated to the data packet and for- 
wards the higher order identifier (HOI) to a second con- 
trol means (CTRL2). The second control means 
(CTRL2) checks a conformance of the data packet ac- 
cording to predefined higher, order conformance rules 
(HOC(HOI)) associated to the higher order identifier 
(HOI) and provides a higher order conformance result 
(HOCR) that is higher order conforming or higher order 
non-conforming. 



< 

in 
oo 



CO 



CL 
LU 



REC 



TR 



j . VCBI j VCAI [ VCA2 j 



vcei 



IN 



2 



VCAI 



DET1 


DET2 


(LOI) 


(HOI) 



I 



CTRL I 
LOC(LOI) ? 



I 



POL 



CTRL2 
HOC(HO!)? 



i 



DECL 



HOCR 



j 



LOCR 



OUT 




Figure 



Prnted by Jouve. 75001 PARIS (FR) 



BNSDOCID: <EP 1030485A1_I_> 



1 



EP 1 030 485 A1 



2 



Description 

[0001] The present invention relates to a method to 
be used in a telecommunication network for policing da- 
ta traffic according to the preamble of claim 1 , to a data 
traffic policer realizing such a method according to the 
preamble of claim 6 and to a telecommunication network 
including such a data traffic policer according to the pre- 
amble of claim7. 

[0002] Such a method for policing data traffic, such a 
data traffic policer and such a telecommunication net- 
work are already known in the art, e.g. from the article 
" The Spacer- controller : an efficient UPC/NPC for ATM 
networks", by RE. Boyeretal., ISS 1992, October 1992, 
Vol. 2, paper A9.3, pp. 316-320. Referring to the intro- 
ductory part it is described that asynchronous transfer 
mode ATM cells are inserted by a user on the network 
access multiplex, called hereafter a common data com- 
munication link, according to any arbitrary timing. There- 
fore, the allocation of network resources to a connection 
can only be based upon traffic parameters declared by 
the user. Call admission implies the negotiation of a 
Traffic Contract that describes as well as can be the traf- 
fic that will be offered at the network entry point. A po- 
licing function is used by the network in order to ascer- 
tain that the negotiated values are actually met during 
the connection. On the other hand, the network is 
bounded to meet the Quality Of Service requested in the 
Traffic contract by properly allocating resources to the 
connection. The mentioned article further addresses the 
integration of a policer and a shaper into the same hard- 
ware device. 

[0003] It is well know to a person skilled in the art that 
an essential step to be executed by such a known po- 
licer is, upon reception of a data packet, determining the 
lower order identifier that is associated to the data pack- 
et, whereby that lower order identifier identifies a lower 
order data flow e.g. in an ATM network determining the 
predefined virtual channel identifier that is associated to 
the ATM cell whereby this virtual channel identifier iden- 
tifies the ATM virtual connection. Indeed, within a pre- 
defined higher order data flow being identified by a high- 
er order identifier e.g. within a predefined virtual path 
being identified by a predefined virtual path identifier, it 
is an essential step to identify the traffic contract asso- 
ciated to this particular received data packet. This step 
is executed by the policer by means of afirst determining 
means. Furthermore the policer checks the conform- 
ance of the data packet according to predefined lower 
order conformance rules i.e. a traffic contract associated 
to the lower order identifier. This function is executed by 
a first control means whereto the lower order identifier 
is forwarded by the first determining means. The first 
control means provides hereby a lower order conform- 
ance result that is lower order conforming or lower order 
non -conforming. 

[0004] A problem outstanding with this kind of policers 
is that the known policing units, e.g. such as described 
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above in an ATM network, perform policing at Virtual 
Channel level i.e. at lower order identifier level or at Vir- 
tual Path level i.e. at higher order identifier level. This 
means that policing is performed only at a single iden- 

s tifier level. The resources that are reserved for some 
predetermined lower order data flow with a lower order 
identifier, but which are not actually used are wasted. 
This is not desirable, especially for quality of services 
QOS such as Variable Bit Rate VBR and guaranteed 

10 Frame Rate GFR, the available bandwidth could be use- 
ful to other active lower order data flows of this higher 
order data flow. 

[0005] This will become more clear with the following 
example of two Local Area Networks LAN's from differ- 

is ent companies A and B, using different Guaranteed Vir- 
tual Channels VCA1, VCA2 and VCB1 , VCB2, respec- 
tively, which are multiplexed in order to share one single 
ATM link. Presume that VCA1 is used to transport mis- 
sion critical traffic from company A, VCA2 is used to 

20 transport best-effort traffic from company A, VCB1 and 
VCB2 are used to transport best effort-traffic from com- 
pany B with two different priorities. Different ways of 
sharing the available bandwidth of the common link are 
possible. Under the assumption that a VC is active or 

25 inactive and that an active VC is always greedy and in 
the event when the VCA1 is inactive, the bandwidth that 
is unused by this VCA1 is distributed among VCA2, 
VCB1 and VCB2. However, such a distribution of the 
available bandwidth is not appropriate from a user's 

30 point of view e. g. company A, especially as in many net- 
works the charging is done on the basis of the amount 
of reserved bandwidth. 

[0006] An object of the present invention is to provide 
a data traffic policer such as the above know policers 
35 but with an improved and fair use of the available band- 
width. 

[0007] This object is achieved by the method for po- 
licing data traffic as described in claim 1, by the data 
traffic policer that is realizing such a method that is de- 
40 scribed in claim 6, and by the telecommunication net- 
work that includes such a policer that is described in 
claim 7. 

[0008] Indeed, the invention is based on the insight 
that left-over available bandwidth of a predefined higher 
45 order dataflow can be shared among all the active lower 
order data flows being part of this higher order data flow 
e.g. leftover bandwidth of a virtual path can be shared 
to all the active virtual channels included inside this vir- 
tual path. 

so [0009] The higher order identifier associated to the 
data packet is also determined by a second determining 
means of the policer. This higher order identifier is for- 
warded to a second control means that checks a con- 
formance of the data packet according to predefined 

ss higher order conformance rules. The control means pro- 
vides thereby a higher order conformance result that 
equals higher order conforming or higher order non-con- 
forming. Furthermore the policer includes declaring 
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means that is coupled between the first control means, 
the second control means and an output of the policer. 
The declaring means declares, in the event when the 
lower order conformance result provided by the first con- 
trol means is lower order non-conforming, but the higher s 
order conformance result provided by the second con- 
trol means is higher order conforming, the data packet 
as conforming. This means that the data packet is al- 
lowed to use some leftover resources within this higher 
order data flow. The leftover resources includes e.g. left- 10 
over bandwidth from another lower order data flow with- 
in the same higher order data flow and buffer space pre- 
viously assigned to another lower order data flow within 
the same higher order data flow. 

[0010] According to the above mentioned example, is 
company A would clearly prefer that the bandwidth that 
is not used by VCA1 would automatically be allocated 
to VCA2 instead of being allocated to VCA2, VCB1 and 
VCB2. This is realized by also defining a traffic contract 
with predefined higher order conformance rules for a 20 
higher order data flow that includes the lower order data 
flows VCA1 and VCA2 but not the lower order data flows 
VCB1 and VCB2. In the event when a data packet of the 
VCA2 connection arrives and that this data packet has 
a lower order non-conforming conformance result but a 2s 
higher order conforming conformance result, the VCA2 
data packet is declared as conforming. In this way, the 
VCA2 connection borrows some leftover bandwidth 
from the VCA1 connection. 

[0011] It has to be remarked that according to the 30 
above described example in an ATM network, such a 
higher order data flow is not necessarily a global virtual 
path that includes the virtual channels VCA1 and VCA2. 
It should be clear that a higher order data flow might as 
well* be- a predefined set of virtual channels whereby .35 
bandwidth guarantees are associated to this set of vir- 
tual channels so that when one virtual channel is inac- 
tive the other virtual channels of the predefined set of 
virtual channels can benefit from the unused bandwidth. 
In a similar way and according to the wording of the 40 
claims, a higher order data flow can be implemented by 
a predefined plurality of lower order data flows or by a 
predefined aggregate of lower order data flows accord- 
ing to the basic principles of the present telecommuni- 
cation network. In practice it is in fact expected that the *s 
invention will be more applied to a logical group of lower 
order data flows instead of a complete predefined ag- 
gregate such as e.g. a virtual path according to the basic 
principles of ATM networks. 

[0012] It has to be remarked that although for e.g. so 
guaranteed frame rate GFR service category a virtual 
path policing is not defined yet, existing variable bit rate 
VBR traffic policers are presently implemented at the 
level of a virtual channel identifier VC but also at the 
level of a virtual path identifier. However, such an imple- ss 
mentation for a virtual path is a stand-alone implemen- 
tation whereby the results of an eventual virtual channel 
traffic contract are not taken into account and whereby 



no bandwidth can be borrowed from one included lower 
order data flow to another included lower order data 
flow. 

[0013] It has to be explained that declaring a data 
packet as being conforming means that according to the 
strategy of the present operator the data packet is dis- 
carded or is marked as non -conforming i.e. tagging a 
data packet. 

[0014] Furthermore, it has to be understood that al- 
though the declaring means declares the data packet 
as conforming in the event when the lower order con- 
formance result is lower order non-conforming and the 
higher order conformance result is higher order con- 
forming, it is not excluded that the policer of the present 
invention might declare a data packet as conforming in 
other situations. Indeed, for example, in the event when 
already the lower order conformance result equals con- 
forming the data packet might be declared immediately 
as conforming and no bandwidth has to be borrowed by 
a another lower order data flow that is part of its higher 
order data flow. 

[001 5] A further f eatu re of the present invention is that 
the step of checking a conformance of the data packet 
according to the predefined higher order conformance 
rules is only executed in the event when the lower order 
conformance result is lower order non -conforming. This 
is described in claim 2. Indeed, in order not to overload 
the actual working of the present policer it might be con- 
venient to implement the policer such that first the 
checking of the lower order conformance is executed 
and secondly, only in the event when the lower order 
checking is non-conforming, the higher order conform- 
ance will be checked. However, in the event when the 
higher order conformance checking implies a modifica- 
tion of some variables upon reception of each data pack- 
et, it has to be remarked that although, in the event that 
a data packet is conforming according to the lower order 
checking, the policer still needs to increment these var- 
iables. 

[0016] A further characteristic feature is that the step 
of checking a conformance according to predefined low- 
er order conformance rules includes one or more lower 
order sub-steps and that the step of checking a conform- 
ance according to predefined higher order conformance 
rules includes one or more higher order sub-steps and 
that the lower order sub-steps and the higher order sub- 
steps are executed according toa mixed sequence. The 
different sub-steps are in fact integrated with each other. 
This is described in claim 3. Indeed, it should be ex- 
plained that in order to check a conformance of a data 
packet, different options are possible to test the data 
packet according to cell based conformance rules or 
even more to test the data packet according to frame 
based conformance rules. For instance e.g. a Guaran- 
teed Frame Rate GFR conformance definition is taking 
into account packet related features such as the Cell 
Loss Priority bit, the Peak cell Rate and the Cell Delay 
Variation Tolerance, and also frame related features 
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such as the Maximum Frame Size. Furthermore, more 
than one conformance test is executed in order to com- 
plete a lower order conformance check or a higher order 
conformance check according to the present invention, 
whereby a predefined structure is brought into the se- s 
quence of the different conformance tests. In order to 
avoid complexity the different steps of the higher order 
conformance check and different steps of the lower or- 
der conformance check are executed in a mixed order. 
It should also be clear that a lower order conformance 10 
check includes similar tests as a higher order conform- 
ance check. These similar tests should not be repeated 
for a second time in the event when both conformance 
checks are to be executed. It should also be clear that 
it might be convenient to control first e.g. a few higher is 
order conformance tests and later on some lower order 
conformance tests in order to return thereafter again to 
control typical higher order conformance tests. For ex- 
ample, it is clear that in the event when for a GFR Guar- 
anteed Frame Rate contract a predefined maximum 20 
frame size MFS for the higher order traffic contract and 
for the lower order traffic contract are equal, that once 
this test is executed the result of the test is valid as well 
for the lower order conformance check as for the higher 
order conformance check. 2s 
[0017] Furthermore, it should be explained that a tel- 
ecommunication network that includes a data traffic po- 
licer according to the present invention supports differ- 
ent kinds of Quality Of Service Categories whereby the 
conformance is checked according to the conformance 30 
definitions of the supported service category. Such a 
supported service category is e.g. the unspecified Bit 
Rate service category or the Guaranteed Frame Rate 
Service Category. 

[0018] Two possible implementations of a. telecom- 3S 
munication network of the present inventions are de- 
scribed in claim 4 and 5. Claim 4 describes an asynchro- 
nous transfer mode network whereby the lower order 
identifier is a virtual channel identifier and claim 5 de- 
scribes an internet network that is working with an hier- 40 
archy of identifiers. 

[0019] Another example is Multi-Protocol Label 
Switching MPLS as described in e.g. in the book 
"Switching in ip Networks : IP Switching Tag Switching, 
and Related Technologies ' written by Bruce Davie, Paul <s 
Doolan, Ytakov Rekhter and published by The Morgan 
Kaufmann Series in Networking, David dark, Series 
Editor in May 1998 with ret. ISBN 1-55860-505-3. 
[0020] Referring to the internet network and Multi Pro- 
tocol Label Switching MPLS, a possible implementation so 
of the present invention is that the internet network is 
using a principle whereby the lower order identifier is a 
lower order label. 

[0021] With the example of this multi -protocol label 
switching implementation and also the example de- 55 
scribed in a following paragraph the next remark be- 
comes clear. Indeed, it is remarked that the present in- 
vention is not restricted to the use of only one lower or- 



der conformance check and only one higher order con- 
formance check. Indeed, a higher order data flow can 
on its turn be part of a third order data flow whereby it 
is possible to borrow bandwidth from one higher order 
data flow to another higher order data flow as long that 
they both are part of the same third order data flow 
wherefore the result of the conformance check is con- 
forming. Multi-protocol label switching is working with la- 
bels that are short, fixed length, physically contiguous 
and locally significant identifiers that are each identify- 
ing a data stream. The essential point about labels is 
that all the data packets with the same label will receive 
a same forwarding treatment i.e. forwarded on the same 
port, with the same next hop label, if any, and using the 
same encapsulation. The granularity of elements asso- 
ciated with labels can vary widely. On one hand a label 
can represent Internet Traffic flows, explicit routes or 
host routes. On the other hand, it could represent an 
egress identifier or an egress router in case of IP unicast 
or it could represent a multicast tree in case of IP mul- 
ticast. Another example of the granularity of a conform- 
ance check is again in an ATM network with at the lowest 
order a virtual channel conformance traffic contract, 
hereafter within a virtual path, a logical group of virtual 
channels conformance traffic contract and at a third or- 
der a virtual path conformance traffic contract. In this 
way it is clear that the present invention can be applied 
for a predefined granularity of identifiers of different or- 
ders. 

[0022] Another possible implementation in an internet 
network with a granularity of identifiers is realized ac- 
cording to the following hierarchy : 

a higher order data flow being identified by a source 
address and a destination address, that includes : 
one or more first lower order data flows being iden- 
tified by source address, destination address and 
transport protocol, that includes : 
one or more second lower order data flows being 
identified by source address, destination address, 
transport protocol and source port, that includes : 
one or more third lower order data flows being iden- 
tified by source address, destination address, trans- 
port protocol, source port and destination port, that 
includes : 

one ore more fourth order data flows being identi- 
fied by source address, destination address, trans- 
port protocol, source port, destination port and file 
type such as an html file or a video file. 

[0023] It should be noticed that the term ^including", 
used in the claims, should not be interpreted as being 
limitative to the means listed thereafter. Thus the scope 
of the expression "a device including means A and B a 
should not be limited to devices consisting only of com- 
ponents A and B. It means that with respect to the 
present invention, the only relevant components of the 
device are A and B. 
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[0024] Similarly, it is to be noted that the term 'cou- 
pled", also used in the claims, should not be interpreted 
as being limitative to direct connections only. Thus, the 
scope of the expression "a device A coupled to a device 
B' should not be limited to devices or systems wherein 
an output of device A is directly connected to an input 
of device B. It means that there exists a path between 
an output of A and in input of B which may be a path 
including other devices or means. 
[0025] The above and other objects and features of 
the invention will become more apparent and the inven- 
tion itself will be best understood by referring to the fol- 
lowing description of an embodiment taken in conjunc- 
tion with the accompanying Figure that represents an 
embodiment of a data traffic policer. 
[0026] First the working of the data traffic policer of 
the invention will be explained by means of a functional 
description of the functional blocks shown in the Figure. 
Based on this description, implementation of the func- 
tional blocks will be obvious to a person skilled in the art 
and will therefor not be described in further detail. In ad- 
dition, the principle working of the method for policing 
data traffic will be described. 

[0027] Referring to the Figure, a data traffic policer 
POL is shown. The data traffic policer POL is preferred 
to be included in a ATM communication network on a 
data communication link L. The data communication link 
data transports packets i.e. ATM cells. In order not to 
overload the Figure only a few data packets are shown. 
Each one of these data packets is part of a virtual chan- 
nel i.e. lower order data flow whereby each data packet 
is associated to a virtual channel identifier i.e. lower or- 
der identifier. Such a virtual channel identifier is e.g. 
VCA1 , VCA2, VCB1 and VCB2. Referring to the Figure, 
for each shown data packet its lower order identifier is 
mentioned in the data packet e.g. VCA2. In this way, the 
communication link L is commonly used by the lower 
order data flows that are associated to the lower order 
identifiers VCA1 , VCA2, VCB1 and VCB2. 
[0028] Presume a situation that the lower order data 
flows with lower order identifiers VCA1 , VCB2, VCB1 
and VCB2 are actually established. At connection set 
up of each lower order data flow also a lower order data 
traffic contract is defined. These lower order data traffic 
contracts are referred to by the lower order identifier e. 
g. VCA2 that is associated to the lower order data flow. 
Furthermore, the data traffic policer POL of this pre- 
ferred embodiment is equipped with the ability to provide 
policing of data traffic according to a traffic contract as- 
sociated to a lower order identifier and to provide polic- 
ing of data traffic according to a traffic contract associ- 
ated to a higher order identifier. For this preferred em- 
bodiment the level of the higher order data policing func- 
tion is preferred to be on the level of a virtual path. The 
virtual path identifier of the virtual path i.e. higher order 
identifier is the reference in order to identify the traffic 
contract of the higher order data traffic policing. 
[0029] In order not to overload the Figure the indica- 



tions to the higher order data flow are included in the 
notations of the lower order data flow identifiers: lower 
order identifier VCA2 is part of the higher order data flow 
that is referred to with the higher order identifier A and 
5 lower order identifier VCB1 is part of the higher order 
data flow that is referred to with the higher order identi- 
fier B. 

[0030] The data traffic policer POL includes an input 
IN and an output OUT. Furthermore the data traffic po- 
10 licer POL includes a receiver REC, a transmitter TR, a 
first determiner DET1 , a second determiner DET2, a first 
controller CTRL1 , a second controller CTRL2 and a de- 
claring device DECL. 

[0031] The input IN and the output OUT of the policer 
75 POL are both coupled to the common communication 
link L. 

[0032] The receiver REC is coupled to the input IN 
and to the first determiner DET1 and to the second de- 
terminer DET2. 

20 [0033] The first determiner DET1 is coupled to the first 
controller CTRL1 and the second determiner DET2 is 
coupled to the second controller CTRL2. 
[0034] Both controllers CTRL1 and CTRL2 are cou- 
pled to the declaring device DECL that on its turn is cou- 

2S pied to the transmitter TR. 

[0035] Finally the transmitter TR is coupled to the out- 
put OUT of the data traffic policer POL. 
[0036] The receiver REC receives the incoming data 
packets being transported over the common communi- 

30 cation link L. Upon reception of a data packet, the re- 
ceiver REC provides the information of the header part 
of this data packet i.e. ATM header to the first determiner 
DET1 and to the second determiner DET2. 
[0037] The first determiner DET1 determines by 

35 - means of the received header information the lower or- . 
der identifier LOI and provides it to the first controller 
CTRL1 . 

[0038] The second determiner DET2 determines by 
means of the received header information the higher or- 
40 der identifier HOI and provides it to the second controller 
CTRL2. 

[0039] The first controller CTRL1 executes a lower or- 
der conformance checking LOC according to the prede- 
fined lower order conformance rules being defined in the 

45 traffic contract that is referred to by the received lower 
order identifier LOC(LOI). The first controller CTRL1 
provides hereby a lower order conformance result 
LOC R that equals lower order conforming or lower order 
non -conforming. This lower order conformance result 

so LOCR is forwarded to the declaring device DECL. 

[0040] The second controller CTRL2 executes a high- 
er order conformance checking HOC according to the 
predefined higher order conformance rules being de- 
fined in the traffic contract that is referred to by the re- 

55 ceived higher order identifier HOC(HOI). The second 
controller CTRL2 provides hereby a higher order con- 
formance result HOCR that equals higher order con- 
forming or higher order non-conforming. This higher or- 
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der conformance result HOCR is forwarded to the de- 
claring device DECL. 

[0041] In the event when the received lower order 
conformance result equals non-conforming and the re- 
ceived higher order conformance result equals conform- 
ing, the declaring device declares the received data 
packet as conforming. Since other situations according 
to other conformance results are going beyond the aim 
of the invention, the functionality of the declaring means 
according to these further situations is not described 
here in further detail. 

[0042] When the declaring device declares the re- 
ceived data packet as conforming, the data packet might 
be transmitted on the communication link L The declar- 
ing device DECL forwards a permission signal to the 
transmitter TR and the transmitter TR transmits the con- 
forming data packet on the communication link L. 
[0043] In order to explain the functional working of the 
present invention a preferred situation will be described 
in details by means of an example. 
[0044] Presume a situation whereby : 

the higher order data flow with higher order identifier 
A includes only two lower order data flows with low- 
er order identifiers VCA1 and VCA2. 
the data packets of the lower order data flow with 
lower order identifier VCA1 are transmitted by a 
source (not shown) at a transmission rate far below 
the contractual minimum data packet rate; and 
the data packets of the lower order data flow with 
lower order identifier VCA2 are transmitted by an- 
other source (not shown) at a transmission rate 
equal to its contractual maximum packet rate; and 
these data packets are also included in the higher 
order data flow with higher order identifier A are 
transmitted at a data packet rate that is still within 
the contractual bandwidth limits. 

[0045] Referring to the Figure, it is shown that a data 
packet is just received by the receiver REC of the data 
traffic policer POL i.e. data packet VCA2. The receiver 
provides the header information of this data packet to 
the first determiner DET1 and to the second determiner 
DET2. According to the predefined nomenclature the 
first determiner DET1 determines the lower order iden- 
tifier LOI=VCA2 and the second determiner DET2 de- 
termines the higher order identifier HOI=A. Both identi- 
fiers LOI=VCA2 and HOI=A are forwarded to the first 
controller CTRL1 and to the second controller CTRL2, 
respectively. 

[0046] The first controller CTRL1 checks a conform- 
ance of the received data packet according to prede- 
fined lower order conformance rules LOC(LOI=VCA2) 
associated to the tower order identifier VCA2 and pro- 
vides thereby a lower order conformance result LOCR 
that equals non -conforming. 

[0047] The second controller CTRL2 checks a con- 
formance of the received data packet according to pre- 



defined higher order conformance rules HOC(HOI=A) 
associated to the higher order identifier A and provides 
thereby a higher order conformance result HOCR that 
equals conforming. 
s [0048] Both results LOCR and HOCR are forwarded 
to the declaring device that declares, according to its 
predefined functionality, the data packet as conforming. 
[0049] In this way the data packet from the lower order 
data flow with VCA2 identifier borrows some leftover 
io bandwidth from the data flow with VCA1 identifier. All of 
this happens under the control of a predefined traffic 
contract of a higher order data flow with a higher order 
identifier A which includes both lower order data flows 
with lower order identifiers VCA1 and VCA2. 
15 [0050] It has to be remarked that the present policer 
according to this described embodiment can easily be 
adapted to use it also for applications where the higher 
order identifier is a logical group of lower order identifi- 
ers. Indeed, in stead of forwarding the header informa- 
20 tion also to the second determiner DET2, it is for such 
an application more efficient to forward by the first de- 
terminer DET1 the virtual channel identifier that is ex- 
tracted from the header information to the second de- 
terminer DET2. Thereby the second determiner DET2 
2S is able to determine a higher order identifier that is as- 
sociated to this lower order identifier. The higher order 
identifier is associated to a logical group of lower order 
identifiers including this lower order identifier. In this way 
the higher order identifier is determined due to informa- 
30 tion of the lower order identifier. 

[0051] A further remark is that the policer of this 
present embodiment can be made more efficient by ac- 
tivating the higher order conformance check of the sec- 
ond controller CTRL2 only in the event when the lower 
35 order conformance result of the first controller CTRL1 
equals non-conforming. Indeed, such a prosecution of 
the different steps provides the advantage that in the 
event when the lower order conformance result equals 
conforming the result is directly provided to the declaring 
40 device that is adapted to declare the data packet, in such 
an event, directly as conforming. However, it should be 
noted that according to such an implementation, a mod- 
ification of the internal state of the higher order conform- 
ance checking should still be updated by e.g. increment- 
's ing the related variables. 

[0052] Finally it should be noted that although the 
above described embodiment of the policer is described 
in an ATM telecommunication network, the application 
of the present invention is not reduced to such an appli- 
es cation. Indeed, small modification evident to a person 
skilled in the art, may be applied to the above described 
embodiment in order to adapt it to be used in other kind 
of telecommunication networks like e.g. an internet net- 
work that for instance uses a multi-protocol label switch- 
es ing principle in order to transmit its data. 

[0053] While the principles of the invention have been 
described above in connection with specific apparatus, 
rt is to be clearly understood that this description is made 
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only by way of example and not as a limitation on the 
scope of the invention, as defined in the appended 
claims. 



Claims 

1. A method to be used in a telecommunication net- 
work by a data traffic policer (POL) for policing data 
traffic on a data communication link (L), said data io 
traffic including one or more data packets, each one 

of said data packets being part of a lower order data 
flow and said lower order data flow being part of a 
higher order data flow, whereby said each one of 
said data packets is associated to a lower order is 
identifier (VCA1, VCA2, VCB1, VCB2) that identi- 
fies said lower order data flow and to a higher order 
identifier that identifies said higher order data flow, 
said method comprising the steps of: 

20 

upon reception a data packet of one of said data 
packets by said policer (POL), determining said 
lower order identifier (LOI) being associated to 
said data packet; and 

checking a conformance of said data packet ac- zs 
cording to predefined lower order conformance 
rules (LOC(LOI)) being associated to said low- 
er order identifier (LOI) and providing thereby 
a lower order conformance result (LOCR) of 
said data packet being any one of lower order 30 
conforming and lower order non -conforming, 
characterized in that said method further in- 
cludes 

determining said higher order identifier (HOI) 
being associated to said data packet; and 35 
checking a conformance of said data packet ac- 
cording to predefined higher order conform- 
ance rules (HOC(HOI)) being associated to 
said higher order identifier (HOI) and providing 
thereby a higher order conformance result 40 
(HOCR) of said data packet being any one of 
higher order conforming and higher order non- 
conforming; and 

in the event when said lower order conform- 
ance result (LOCR) is lower order non-con- *s 
forming but said higher order conformance re- 
sult (HOCR) is higher order conforming, declar- 
ing said data packet as being conforming, 
whereby said data packet whilst being transmit- 
ted uses some left-over resources within said so 
higher order data flow 

2. The method according to claim 1 , characterized in 
that said step of checking a conformance of said 
data packet according to predefined higher order ss 
conformance rules (HOCR) is executed in the event 
when said lower order conformance result being 
lower order non -conforming. 



3. The method according to any one of claim 1 and 
claim 2, characterized in that said step of checking 
a conformance according to predefined lower order 
conformance rules (LOC(LOI)) includes one or 
more lower order sub-steps and that said step of 
checking a conformance according to predefined 
higher order conformance rules includes one or 
more higher order sub-steps and that said lower or- 
der sub-steps and said higher order sub-steps be- 
ing executed according to a mixed sequence. 

4. The method according to claim 1 , characterized in 
that said telecommunication network is an asyn- 
chronous transfer mode network whereby said low- 
er order identifier (LOI) is a virtual channel identifier 
(VCA2). 

5. The method according to claim 1 , characterized in 
that said telecommunication network is an internet 
network and that said internet network is working 
with an hierarchy of identifiers. 

6. A data traffic policer (POL) for use on a data com- 
munication link (L) in a telecommunication network 
to police data traffic being transmitted via said data 
communication link (L), said data traffic includes 
one or more data packets whereof each one is part 
of a lower order data flow and said lower order data 
flow is part of a higher order data flow, each one of 
said one or more data packets being thereby asso- 
ciated to a lower order identifier (LOI) that identifies 
said lower order data flow and to a higher order 
identifier (HOI) that identifies said higher order data 
flow, said policer (POL) includes first determining 
means (DET1 ) being coupled to an input (IN) of said 
policer (POL) and included to determine, upon re- 
ception of a data packet of one of said data packets 
by said policer (POL), said lower order identifier 
(LOI) that is associated to said data packet, and a 
first control means (CTRL1 ) coupled to said first de- 
termining means (DET1) to check a conformance 
of said data packet according to predefined lower 
order conformance rules (LOC(LOI)) associated to 
said lower order identifier (LOI) being provided by 
said first determining means (DET1) to said first 
control means (CTRL1 ) and to provide thereby a 
lower order conformance result (LOCR) that is any 
one of lower order conforming and lower order non- 
conforming, characterized in that said policer 
(POL) further includes second determining means 
(DET2) being coupled to said input (IN) in order to 
determine said higher order identifier (HOI) that is 
associated to said data packet and to provide said 
higher order identifier (HOI) to a second control 
means (CTRL2) being coupled thereto, said second 
control means (CTRL2) to check a conformance of 
said data packet according to predefined higher or- 
der conformance rules (HOC(HOI)) being associat- 
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ed to said higher order identifier (HOI) and to pro- 
vide thereby a higher order conformance result 
(HOCR) that is any one of higher order conforming 
and higher order non-conforming, and declaring 
means (DECL) coupled between said first control s 
means (CTRL1), said second control means 
(CTRL2) and an output (OUT) of said policer (POL) 
to declare, in the event when said lower order con- 
formance result (LOCR) provided by said first con- 
trol means (CTRL1 ) is lower order non -conforming, 10 
and said higher order conformance result (HOCR) 
provided by said second control means (CTRL2) is 
higher order conforming, said data packet as con- 
forming, whereby said data packet when being 
transmitted uses some left-over resources within is 
said higher order data flow. 

7. A telecommunication network characterized in that 
said telecommunication network includes at least 
one data traffic policer (POL) according to claim 6. 20 
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